01 Record

CVE-2026-53525

WeeChat has Non-Constant-Time Password Hash Comparison in Relay Authentication

HighPUBLISHEDCNA: GitHub_M

Base score7.4 CVSS v3.xCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H

02 Description

WeeChat has Non-Constant-Time Password Hash Comparison in Relay Authentication

Published

2026-08-21 22:19Z3 HR AGO

Last updated

2026-08-21 22:19Z3 HR AGO

Reserved

2026-06-09

Assigning CNA

GitHub_M

Record state

PUBLISHED

Severity

High (CVSS 7.4)

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H

Weaknesses

SSVC decision

No CISA-ADP assessment

Data version

5.2

Document digest

8681eca5c5afeaa1084e79120d90ca10166ce5cfbf05b99246a2ce8fb0d0b331

VendorProductVersionsPlatforms

weechatweechat>= 0.3.4, < 4.9.1—